Cyber Security Manager

View full description

Requirements:

• Bachelor’s or master’s degree in computer science, Information Systems, or other related field or equivalent work experience.
• Minimum of 8 years of IT and business/industry work experience, with at least 3 years of leadership experience in managing multiple, large, cross-functional teams or projects.
• Experience in senior level management in IT information security, including responsibility for departmental decisions and management.
• Experience in design and engineering firms a plus.
• Experience with SentinelOne and USM Anywhere a plus.

Responsibilities:

• Responsible for the assessment and improvements of our enterprise information security strategy and best practices in support of the enterprise’s information security architecture.
• Collaborates with key business and IT leaders to develop security and business continuance standards and action plans.
• Directs all security audits and tasks to ensure that the integrity, confidentiality and availability of information to end-users, is not compromised.
• Ensures that IT complies with existing laws and regulations and that the enterprise’s IT environment is secure.
• Responsible for ensuring that tools or technologies are implemented to reduce the risk of 'denial of service' attacks against systems.
• Acts as an advocate for information security and business continuance best practices.
• Consults with senior IT and business leaders regarding their information security risks and responsibility in minimizing those risks.
• Maintains reliable, up-to-date, information from the government and across the industry regarding identification of new threats and vulnerabilities.
• Collaborate with internal divisions to understand application usage and improve our security posture.
• Review and participate in negotiations on client cyber contract requirements and ensure Benesch compliance with agreements.
• Manage cyber insurance compliance requirements including yearly penetration testing, incident response tabletops, and phishing tests.
• Maintain and update incident response plan.
• Manage internal security staff.
• Coordinate and manage security vendors and MTDR.
• Guide the company to compliance with a chosen cybersecurity protocol.